CVE-2025-38656
kernel: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 22, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Statement
Red Hat Enterprise Linux is not affected by this vulnerability because the flawed upstream commit is not present in supported Red Hat kernels. The issue is limited to environments running specific upstream stable kernels equipped with legacy Intel wireless hardware operating in DVM mode. Under affected configurations, failure during deferred work initialization could trigger improper pointer handling and lead to a kernel memory corruption flaw, but standard Red Hat deployments remain unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-416 · Use After Free